
returning the password to an application to gain entry to the 




m 



application. 

31. The method of claim 30, further comprising: 
receiving the input data; 

determining if the salt value exists; 

generating the salt value and storing the salt value in a table entry if 
the salt value does not exist; and 

retrieving the salt value from the table entry if the salt value exists. 

32. The method of claim 30, wherein the input data comprises a user 
identification and a strong password. 

33. The method of claim 32, wherein the input data further comprises an 
application identification. 

34. The method of claim 32, further comprising determining if a new 
strong password is required; and 



35. The method of claim 32, wherein the strong password is used to 
generate a plurality of application passwords. 

36. The method of claim 30, wherein the salt value is one of 
predetermined and generated by a random number generator. 



retrieving the new strong password if the new strong password is 



required. 
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37. The method of claim 30, wherein the salt value and the application are 
associated in the table entry. 

38. The method of claim 30, wherein the application is run on one of a 
local computer system and a networked computer system. 

39. The method of claim 30, wherein one of a secure hash algorithm 
(SHA-1) and a message digest (MD5) algorithm are used to generate the hash. 

40. The method of claim 30, wherein the generated password is 
temporarily stored in a memory for a predetermined time period. 

41. The method of claim 40, wherein the predetermined time period is 
based on platform activity. 

42. The method of claim 41, wherein the platform is one of a local 
computer system and a networked computer system. 

43. A program storage device readable by a machine comprising 
instructions that cause the machine to: 

generate a hash from a salt value and input data; 
generate a password from the hash; and 

return the password to an application to gain entry to the application. 

44. The program storage device of claim 43, further comprises instructions 
that cause the machine to: 



receive input data; 
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determine if a salt value exists; 

generate a salt value and store the salt value in a table entry if the salt 
value does not exist; and 

retrieve the salt value from the table entry if the salt value exists; 

45. The program storage device of claim 43, wherein the input data 
comprises a user identification and a strong password. 

46. The program storage device of claim 45, wherein the input data further 
comprises an application identification. 

47. The program storage device of claim 43, further comprises instructions 
that cause the machine to: 

determine if a new strong password is required; and 

retrieve the new strong password if the new strong password is 

required. 

48. The program storage device of claim 47, wherein the strong password is 
used by the machine to generate a plurality of application passwords. 

49. The program storage device of claim 43, wherein the salt value is one 
of predetermined and generated by a random number generator. 

50. The program storage device of claim 43, wherein the salt value and the 
application are associated in the table entry. 
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5u ^51. The program storage device of claim 43, wherein one of a secure hash 



algorithm (SHA-1) and a message digest (MD5) algorithm are used in instructions to 
cause the machine to generate the hash. f^^f 



52. 



May 



^ The program storage device of claim 43, wherein the generated ^ - %0Q] 

password is temporarily stored in a memory for a predetermined time perioci. £jqq 

53. The program storage device of claim 52, wherein the predetermined 
time period is based on platform activity. 



54. The program storage device of claim 52, wherein the platform is one of 
a local computer system and a networked computer systprn. . 



REMARKS 

Entry of the foregoing amendments prior to the initial examination of the 
above-captioned application is respectfully requested. 

Respectfully submitted, 

BLAKELY, SOKOLOFF, TAYLOR, & ZAFMAN LLP 



Dated: April 25. 2001 



12400 Wilshire Boulevard 
Seventh Floor 

Los Angeles, California 90025 
(310) 207-3800 



By: 





Steven Laut 
Reg. No. 47,736 



CERTIFICATE OF MAILING: 

I hereby certify that this correspondence is being deposited with the United States 
Postal Service as first class mail in an envelope addressed to: Assistant Commissioner 
for Pate/its, Waghiggton, Dp-20231 on April 25.2001 . 



\zar Burnham 



April 25, 2001 
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